Avast Blog_Tips & Advices: Here's what your MyHeritage DNA testing kit reveals about

[harlan4096]

What are the broader implications of a DNA testing company having access to both your DNA and online data?

I’m kind of a genealogy nerd. I don’t mean like a hardcore genealogy person — I’ve probably spent a total of an hour on Ancestry.com in my entire life — but I’ve spent a higher-than-average amount of time looking into my family background. I like hearing the stories when my family has them, and I like imagining all of the different situations all across the world that had to occur in order for me to come into existence.

So when at-home DNA testing became a thing, I was into it. I had a pretty good idea of what my ethnic background was (spoiler: very European) but there were a couple of gaps in the history that made me wonder. And maybe I’d find out something totally new and surprising. So I spit in a tube, popped it in the mail, and waited for my results.

What I didn’t think about back in 2017 was the potential risk of sending my DNA off to a private company. And I’ll admit: That’s kind of embarrassing. Because it seems so obvious now, right? Like, maybe it’s not a great idea to send off my genetic code to anywhere, much less a private company. 

The goal of What Does the Internet Know About Me? is to go deep on all of the things that might be known about me online, good and bad. So far it hasn't been as scary as I expected it to be. But I was nervous about this one. Did I make a major mistake when I spit in that tube? And if I did, could I reverse it? 

So here’s what I found about MyHeritage DNA. To start, I want to emphasize that the privacy and security things I highlight here have to do with only this company. I didn’t review any of the other popular ones, like 23andMe or AncestryDNA, and their privacy policies will be specific to them. If you’re concerned about a different online DNA testing company, I encourage you to go read their privacy policy before handing over your DNA. 

What MyHeritage DNA knows

Well, the first and most obvious thing is that MyHeritage knows my actual DNA. That means they know things about me that I don’t even know. For example, if I chose to pay for an upgrade, they could tell me what diseases I’m genetically predisposed to. 

I’m choosing not to pay for that option, because it feels like giving them even more information about myself than I need to and like opening myself up to bigger potential privacy issues. But to be honest, that might be a false sense of security. I mean, they have the sample. Theoretically they could check it if they wanted to. (Although, to be clear, there’s no evidence that they do this.)

With that DNA sample, they can also estimate where my ancestors came from, based on genetic markers of people who currently live in those regions. As a consumer, this is probably the most interesting part. You get a cool little interactive map that shows the regions your ancestors likely came from and you can click on each one to learn more about that group. 

There wasn’t anything too surprising in mine, except that they didn’t identify any non-Jewish German ancestors, despite the fact that my father’s grandmother’s last name was Schoeffel. They did, however, identify a bunch of Scandinavian lineage, which isn’t part of my family’s oral history. I was confused until my partner pointed out that Germans from a few generations ago might have looked more genetically similar to modern Scandinavians than to modern Germans. Ancestry mystery solved! 

MyHeritage also knows who I’m “related to.” I’m putting that in quotes because so far it’s only connected me with estimated third to fifth cousins; people with whom I share less than 1 percent of my DNA markers. These are all people who I could theoretically have children with and have absolutely no concerns about potential genetic abnormalities, so I’m reluctant to call them relations. Of course, if someone in my more immediate family also took a test from MyHeritage, it would be a different story. But that hasn't happened so far. 

MyHeritage also knows my first and last name and my email address, but no other personal info about me — because I haven’t provided it. If I wanted to take advantage of other services the site provides (or even just go more in-depth into my own genealogy), I could add my:

• Photo
  
• Address
  
• Phone number 
  
• Fax number (!!)
  
• Work history
  
• Education
  
• Interests
  
• Religion
  
• Nationalities
  
• Languages spoken
  
• Political views
  
• Height and weight
  
• Eye color
  
• Hair color
  
• Immediate family members/family tree
  

And on a tech level — because this is still a tech company, even if it doesn’t quite feel like it sometimes — MyHeritage tracks the usual stuff via cookies, according to their Privacy Policy. They explain what cookies are, what they track, and also walk users through how to opt out of tracking, all in plain language. 

What does MyHeritageDNA do with my data?

As I mentioned, I was pretty nervous going into this research. But I was pleased to find out that MyHeritage DNA takes privacy pretty seriously. According to their privacy policy, MyHeritage has and will never sell or license personal data, genetic data, or health data — without “explicit informed consent.” 

That’s great, but maybe even better is MyHeritage’s policy that they “will never provide data to insurance companies under any circumstances” and that they prohibit “law enforcement use of” their DNA Services.

Their policy also says that they have never sold or licensed personal data, “i.e. customer names, email addresses, residence addresses and family trees and will never do so in the future.” They do, however, have third-party marketing trackers on their website. That means users are being tracked for marketing purposes.

Finally, MyHeritage does let users delete all or some of their data — and it’s pretty easy to do so. That’s another point in the privacy checklist.
...

Continue Reading